Friday, July 17, 2009

Ebay Phishing Malware Scam

Date: Fri, 17 Jul 2009 21:01:30 +0100
From: "alerts@ebay.com" alerts@ebay.com
Subject: Service message
To: one of my email addresses but not the one associated with my Ebay account.
Reply-to: alerts@ebay.com

eBay sent this message to me@thewrongemailaddress.
Your registered e-mail is included to show this message originated from eBay.

-Actually, doofus, you just proved you are not Ebay and this message didn't originate from Ebay and is a scam. I didn't register with Ebay under that email address but it is one of my other email addresses.

eBay confirmation form

Dear eBay user,

-See, you don't even know my username over there. You would if you were from Ebay.

We would like to inform you that we have released a new version of eBay Confirmation form. This form is required to be completed by all eBay users.

-I call bullcrap.

Please follow these steps:

1.Open the form at http://cgi.ebay.com

-rest of url deleted. Look, Ebay doesn't have urls like that, it's obviously a malicious cgi script; and no real company sends email out telling you to click some obscure link, much less to a wrong email address.

No, I don't want your stupid malware or to give you my userid and password. Go away.

No comments: